Operational Technology (OT) Security Analyst

Air Liquide; Selangor; On-site; MYR 90,000 - 150,000; Full time

Job summary

Air Liquide is seeking an Operational Technology Security Analyst in Malaysia to define methodologies, perform security assessments, and address OT/IoT vulnerabilities. The role supports global OT security programs and coordinates remediation with stakeholders across the APAC region.

You will work on IoT/OT frameworks, vulnerability management, and cloud OT environments, collaborating with incident response teams to develop pragmatic mitigations and maintain secure industrial controls.

Qualifications

• Experience implementing OT security in IoT/OT environments.
• Ability to communicate risk statements to stakeholders.
• Knowledge of OT/ICS concepts and security frameworks.

Responsibilities

• Define methodology and conduct security assessments for OT/IoT environments.
• Coordinate remediation and communications of vulnerabilities with stakeholders.
• Support OT security programme deployment across APAC.
• Identify and address OT legacy security issues with measurable objectives.
• Coordinate penetration testing on critical sites and track closure of gaps.
• Socialize security policies and standards across OT domains.
• Support cybersecurity operations during incidents and develop mitigation plans.
• Balance technology, people and process aspects for secure systems.

Skills

IoT/OT security

Risk assessment

Vulnerability management

Communication skills

Analytical troubleshooting

Stakeholder engagement

Penetration testing coordination

Security policies & standards

Cloud OT environments

Kubernetes

ITIL/COBIT frameworks

Influencing & facilitation

Education

Degree in IT/Engineering

Tools

Vulnerability management tools

Kubernetes

Job description

Jora Malaysia will close on 16th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Operational Technology (OT) Security Analyst

Air Liquide IT: The Group launched an overhaul of its IT services, to simultaneously improve and world security, competitiveness and agility. This results in a changing IT organizations with infrastructure services and IT production which will now be managed globally by a central department called GIO (Global Infrastructure Operations) and business applications that will be supported by dedicated departments, called BIS (Business Information Systems) for each business line and relevant geographies.

How will you CONTRIBUTE and GROW?

• Define methodology, conduct security assessments, and address any findings by supporting solution implementation to develop segmented infrastructure that includes various IoT/OT technologies and models best practices.
• Identify and effectively communicate IoT/OT architectural vulnerabilities with supporting risk statements and realistic mitigation options to stakeholders.
• Support and manage the Group OT Security programme deployment within the APAC region
• Identify cleanup activities within Air Liquide IoT/OT legacy security issues and achieve pragmatic and measurable objectives.
• Coordinate Penetration Testing activities on critical sites. Responsible to track and monitor those identified gaps till closure
• Socialize security policy and standards across relevant areas of the OT organization - empowering and educating people to build secure and compliant systems.
• Support Cybersecurity operations team during and after security incidents and develop mitigation plans to avoid future occurrences.
• Assisting internal stakeholders to understand not just the technology aspects of security but to balance these with people and process aspects to create a coherent overall approach.
• Experience of IoT/OT security frameworks and standards eg. NIST 800-82, ISO/IEC 27002, ideally in the delivery of global IT services
• Knowledge of Vulnerability management tools and frameworks
• Understanding of OT and industrial control systems concepts
• Knowledge of Cloud OT environments (Azure/AWS) and IoT cloud including Kubernetes and other VM containers desirable
• Proven analytical and troubleshooting skills in prior roles
• Degree qualified or with more than 5 years of Infrastructure design and implementation background
• (Good to have) Relevant certifications eg. Global Industrial Cyber Security Professional (GICSP), GIAC Response and Industrial Defence (GRID), GIAC Critical Infrastructure Protection (GCIP) highly desirable
• Knowledge in COBIT and ITIL Frameworks
• Analytical and objective – able to elaborate on, characterize, assess and evaluate technology and tech-related risks dispassionately and rationally;
• An influencer and facilitator – able to build strong interpersonal relationships, and inform, guide and motivate managers and technologists with due care and attention to detail;
• Strong communication skills – able to explain often complex and obscure technical detail to non-specialists, and (just as importantly) good at listening and sensitively interpreting others

Other Information:

• Office Location: Level 17, 1Powerhouse